What this test does

Checks the scope parameter.

How it passes

Scopes are valid tokens, and email is never requested without profile.

Specification
§5.3.4, RFC 6749 §3.3
Needs
C101 Discovers the server from an HTML link